Protecting learner data is foundational to Lumin

We collect information you provide when creating an account, such as your name, email address, school, and language preferences.

Usage data is captured to personalise lessons and improve product performance. This includes assessment scores, conversation transcripts, and device information like browser type.

For school accounts, we process roster data provided by administrators in accordance with data protection agreements.

Lumin is hosted on Supabase, our managed backend platform, with primary infrastructure located in the European Union.

Supabase provides encrypted data storage, role-based access controls, and continuous monitoring that we configure to meet GDPR security requirements.

We retain personal information only for as long as necessary to deliver the service, comply with legal obligations, or resolve disputes, after which it is securely deleted or anonymised.

Deliver and improve the Lumin service, including adapting lessons, analysing progress, and providing teacher dashboards.

Communicate with you about updates, security alerts, and support requests.

Meet legal and compliance obligations, including safeguarding and child protection requirements where applicable.

We do not sell personal information. We share data with trusted sub-processors who assist in hosting, analytics, and customer support, including Supabase as our core database and authentication provider. These partners are bound by strict privacy obligations and data processing agreements.

International data transfers are supported by standard contractual clauses and regional data residency options for education customers, and we prioritise keeping learner data within the EU whenever technically feasible.

You can request a list of current sub-processors or sign up for updates at privacy@lumin.app.

Depending on your region, you may have the right to access, correct, delete, or export your personal information.

Students under the age of 18 should work with a parent, guardian, or school administrator to submit data requests.

To exercise your rights, email privacy@lumin.app and we will respond within 30 days.